Priority Arguments and Epsilon Substitutions 



Henry Towsner 
December 18, 2008 



1 Introduction 

While the priority argument has been one of the main techniques of recursion the- 
ory, it has seen only a few applications to other areas of mathematics [Mar75 , Sol84|. 
One possibility for another such application was pointed out by Kreisel: Hilbert's e- 
substitution method, a technique for proving the 1-consistency of theories. Kreisel's 
observation was that the proof that the method works | Ack40| bears a striking resemb- 
lence to the structure of a traditional finite injury priority argument. 

Such a connection might have benefits for both fields. The e-substitution method 
has powerful extensions [Ara05b Ara05a Ara06| which might provide new tools for 
solving difficult recursion theoretic problems. In the other direction, the most pop- 
ular proof theoretic technique for proving 1-consistency results, cut-elimination, has 
bogged down in technical details, and new ideas are neeed to make ordinal analytic 
results more accessible. 

Unfortunately, Kreisel's observation has been difficult to turn into a concrete ar- 
gument. After Yang HYan95l , the reason is clear: the success of all finite injury pri- 
ority arguments is exactly enough to prove the 1-consistency of the weak theory /Si, 
and therefore finite injury arguments cannot be sufficient to prove the consistency of 
stronger theories. Using a general framework for priority arguments developed by Ler- 
man and Lempp [LL90 LL92I ILL97I , Yang goes on to show that arguments on the 
n-th level of their hierarchy of priority arguments are equivalent to the 1-consistency 
of /S„, and so it requires the full u> levels of that hierarchy to give 1-consistency for 
all of first-order arithmetic. 

The better known infinite injury and monster injury priority arguments belong to 
the second and third levels of this hierarchy, and, as the name "monster" suggests, go- 
ing to higher levels becomes impractical without some kind of general framework. The 
Lerman-Lempp framework is one of several that have been proposed [Ash86 Ash90 
Kni90 GS|. One technique, usually described using "workers on many levels," origi- 
nally developed by Harrington, has been extended to hyperarithmetic levels. 

We show in this paper that, if one is prepared to use one of these frameworks to 
describe the necessary priority argument, that the e-substitution method can be proven 
to work using a priority argument. We follow Yang in using the Lerman-Lempp frame- 
work, although we know of no reason that other frameworks would not work just as 
well. 
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Currently, those few priority arguments that have been extended to hyperarith- 
metic levels have a fixed ordinal height a. This paper and Yang's suggest that this 
corresponds to the 1 -consistency of Peano Arithmetic plus transfinite induction up to 
a particular ordinal. The e-substitution has difficult but reasonably well-understood 
extensions to systems like IDi flMin03l |Ara 03l, a system which adds a least fixed 
point to arithmetic, and (less well-understood) extensions to even stronger systems 
BAra05al IAra061 . We hope that these results can also be translated into the priority 
argument environment, giving a stronger recursion theoretic technique which might be 
capable of answering unsolved questions. 

In the hopes of making the proof more accessible, we abandon the standard termi- 
nology of the e-substitution method for more conventional terminology. We work in a 
quantifier-free language with Skolem functions: function symbols of the form c^ x m x t g\ 
where <j> is quantifer-free and y is a sequence of variables. A term c^ x ^[ Xi ^(i) is in- 
tended to represent a value n such that ip[n, i) holds, if there is such an n. Note that 
we allow nesting, to represent S„ formulas for arbitrary n; for instance terms like 
Cbx.^.^^w] are allowed. 

An e-substitution is just a partial model for this language, providing an interpre- 
tation for the value of some Skolem functions when evaluated at some points. Such 
partial models may not satisfy all axioms, but we will be interested in satisfying only 
finitely many axioms at a time. When an e-substitution fails to satisfy some axiom, 
it will always be possible to repair this in a canonical way by extended the substitu- 
tion. The act of doing so, however, may force us to remove some other elements, since 
changing the value of one term may alter the interpretation of others. 

The Lerman-Lempp framework for priority arguments uses a tower of trees, where 
the n-th tree controls conditions guiding £„ properties. We choose branches in the tree 
in stages, with each stage corresponding to a step in our construction. The important 
idea is that the branches we choose stabilize enough to give a well-formed construction. 
For instance, at the bottom level are Si properties; in our case, these form a tree where 
we can only change once: when we first reach a node with one of these conditions, 
unless our construction already witnesses the Ei case, we assume a III outcome. If 
at a later stage we discover a witness, we backtrack and choose a different branch, 
abandoning some of our progress through the tree. But, having been witnessed, the Si 
outcome cannot change, so eventually we achieve a path through this tree. The next 
tree controls S2 properties, which can change back and forth repeatedly; the key to the 
proof will be that, relative to the first tree, the second tree has controlled backtracking: 
that is, except when we backtrack in the first tree, the second tree behaves like the first 
tree. But since we can control the backtracking in the first tree, this gives an indirect 
control on the path we construct in the second tree. This process is then repeated to give 
enough control on all the trees to prove that the construction we want is well-behaved. 

Unlike a typical priority argument, our setting is finitary. While this changes the 
phrasing of some arguments, the underlying concerns are the same: in a usual priority 
argument, we must arrange infinitely many conditions so that they have order type u>, 
while in this case, we must arrange finitely many (where some appear multiple times) 
so that they eventually run out. This proof could be modified to work with countably 
many conditions — for instance, all possible conditions — and therefore to prove that 
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there is a recursively enumerable e-substitution assigning correct values to all rank 1 
Skolem functions (that is, all Skolem functions for Si formulas). 

Rather than literally following the iJ-process, we prove termination of a modi- 
fied process derived from our construction. The primary difference is that in certain 
situations we add additional information to our e-substitution whose correctness is 
witnessed even if there is no axiom compelling us to do so. This turns out to better 
match our construction since it means we can decide locally, by examining only the 
e-substitution, whether that information is present, rather than having to know what 
happened at previous stages to figure out whether it might have been added at some 
point. 

2 Skolem Functions and e-Substitutions 

In this section, we present a simplified version of the e-substitution method. For the 
standard presentation, as well as those lemmas whose proofs we have omitted, see 
HMTB96I . 

We work in a Skolemized version of first-order arithmetic. 

Definition 2.1. Let Co be the ordinary language of first-order arithmetic. In particular, 
it contains predicate symbols for each primitive recursively definable relation, and the 
function symbols and S (and no others). 

Given a language C define the Skolemization C by adding, for each Si formula 
3x.<p[x,yi, . . . ,yk] such that <fi[x, 0, . . . , 0] contains no closed Skolem terms andyi, . . . ,yk 
includes all free variables besides x in <j), add a k-ary Skolem function c^ x m x yi Vk ]. 

Let Cn+i '■= C' n , and let C u := |J C n . Let Ce be the quantifier-free part of C^,. 

A formula or term e has rank n, written rfc(e) = n, if it belongs to C n but no C m 
for m < n. 

Note that 3x.(f>[x, yi, . . . , y n ] may contain Skolem functions which depend on x. 

Definition 2.2. Within Ce, we take 3x.(f>[x,t\ to be an abbreviation for (j)\c^ x .<{,(£) , t] 
and\/x.(j)[x, t\ to be an abbreviation for (f)[c^ x .^^{t), tj. 

Definition 2.3. The only rule of PAe is modus ponens. The axioms are: 

1. All propositional tautologies of the language Ce 

2. All substitution instances of the defining axioms for predicate constants 

3. Equality axioms t — t and s = t — > </>[s] — > <p[t] 

4. Peano axioms ->St = and Ss = St —* s = t 

5. Critical formulas: 

• <p[t] —* 3x.<p[x] 

• (p[0\ A -^4>[t] -> 3x.(4>[x] A -><f>[Sx]) 

• -is = — > 3x.s = Sx 
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This is a standard axiomization of Peano Arithmetic, except that 3x.0[x] is an 
abbreviation for a statement about Skolem terms. Note that all critical formulas have a 
general form <fr — > tp[c] for a Skolem term c; we will sometimes make reference to this 
general form for an arbitrary critical formula. 

Theorem 2.1. If there is a proof of a closed formula 4> in PA then there is a proof of 
4> in PAe (where quantifiers are interpreted as abbreviations) containing only closed 
formulas. 

From here on, we assume that all formulas are closed (since in the Skolemized 
language there is no need for free variables). 

2.1 e-Substitutions 

We will be interested in particular partial models of formulas in Ce assigning values to 
finitely many values of the Skolem functions. We will only assign values to predicates 
of the form c 3a . ^ x ^ (i) where each U is a natural number, and will assign either a 
natural number u (asserting that (j)[u, t\ holds) or a default value ? (leaving open the 
possibility that Vx.^(p[x, t\). 

Definition 2.4. A canonical term is a term of the form c(t) where c is a Skolem function 
and each ti is a numeral. 

To keep some continuity with other work in the area, we call these models e- 
substitutions: 

Definition 2.5. 

An e-substitution is a function S such that: 

• The domain of S is a set of canonical terms 

• If e G dom(S') then S(e) is either a numeral or the symbol ? 

An e-substitution is total if its domain is the set of all canonical terms. 

We will frequently have a non-total e-substitution which we wish to take to be 
"complete": that is, we wish to assign the default value to every canonical term not 
specifically assigned some other value. 

Definition 2.6. The standard extension S of an e-substitution S is given by 

S:=SU{(e,?) |e£-dom(S)} 

Definition 2.7. Ift is a term, we extend the function S to define S(t) on arbitrary terms 
by induction on t, and also to sequences of terms: 

• If sis the sequence s\, . . . , Sk, set S(s) := S(si), . . . , S(sk) 

• Ift is a non-canonical Skolem term of the form c(s) and for some i, S(si) is not 
a numeral then S(t) := c(S(s)) 
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• Ift is a non-canonical Skolem term of the form c(s) and for every i, S(si) is a 
numeral then S(t) := S(c(S(s))) 

• Ift is a canonical Skolem term in the domain of S and S(t) =? then S(t) := 

• Ift is a canonical Skolem term in the domain of S and S(t) 6 N then S(t) := 
S(t) 

• Ift is a canonical Skolem term not in the domain of S then S(t) := t 

• S(St) := SS(t) 

• 5(0) := 

Definition 2.8. • If (f> is an atomic formula Rt\ ■ ■ ■ t n then S N Rt\ ■ ■ ■ t n iff S{ti) 
is a numeral for each i and RS(t\) ■ ■ ■ S(t n ) holds in the standard model 

• If (f> is a negated atomic formula ->Rti ■ ■ ■ t n then S N ->Rti ■ ■ ■ t n iff S(ti) is a 
numeral for each i and -iRS(ti) ■ ■ ■ S(t n ) holds in the standard model 

• S\=cpAiljiffS\=<f>andS\=ip 

• S N ->{4> A -0) iffS N -n<j> or S N ^ 

• S^<j)Vi;iffS\=<j)orS\=ip 

• S N ->(4> V -0) iffS N ^ and S \= ->ip 

The unusual handling of negation is necessary because if S is not total, some for- 
mulas may be indeterminate. 

Definition 2.9. S decides (f> if S \= (f> or S N -^(f>. 

unev((j), S), the set of terms in (f> not evaluated by S, consists of terms of the form 
c(s) such that S(si) is a numeral for each i, but S(c(s)) is not a numeral. 

Lemma 2.1. • If S \= 4> then S \f -«j>. 

• IfSis total then S decides all closed formulas. 

• If S does not decide a closed formula (f) then unev((f>, S) is non-empty 
Definition 2.10. 

S< r := {(e,u) G S | rk(e) < r} 

Lemma 2.2. If S and S' have the same domain and same values for Skolem functions 
of rank < r (that is, S< r = S' <r ) and (f> contains only Skolem functions of rank < r 
then S \= 4> iff S' N 0. 

The purpose of e-substitutions is the following theorem: 

Theorem 2.2. Suppose that for every proof of a formula </> in PAe, there is an e- 
substitution S such that S \= (f>. Then Peano Arithmetic is 1-consistent. 
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Proof. If PA h 3x.(j)[x,t\ then PAe h ^[cg^^i), ij where the terms in t are nu- 
merals. By assumption, there is an 5 such that 5 N </>[c3 x .«,i(t), i], and therefore 
</ , [<S , (c3 a ;.0(t)), i] is a true quantifier-free formula. □ 

Importantly, this theorem is provable in PRA: we will give a computable procedure 
for finding such a substitution. First, we find simpler conditions under which S \= <f> 
holds. 

Lemma 2.3. • If 4> is an axiom other than a critical formula then S \= 4> 

• // 5 N (j) and 5 N -> V f«<?» 5 h ^ 

Therefore to show that 5 satisfies the conclusion of a proof, it suffices to show that 
5 satisfies each critical formula appearing in the proof. 

Definition 2.11. Let ebe a closed term. 

• <t>[[v,t\] := 0M1 A A„<„ -<AM1 

. F(S) := {<f>[[v, t\] | (c^ xMx) (t),v) GSA^?} 

• 5 is correct if for any <fi <G F(S), S \= 4> 

<f>[[v]] just states that v is the smallest value where <p{x) holds. A correct e-substitution 
ensures that whenever it assigns a numeral to some canonical term, it is assigning the 
minimal correct witness to the Skolem function. 

From here on, let Cr = {Cr , . . . , Cr N } be a fixed sequence of closed critical 
formulas. 

Definition 2.12. We say 5 is solving if for each I < N, 5 1= Cn. 

Let 5 be a finite, correct, nonsolving e-substitution. We will consider the critical 
formulas made false by 5 and select the first one of minimal rank to be fixed. For 
J = 0, . . . , N, we define parameters needed for the H -process. 

Definition 2.13. IfCr is a critical formula, we define the key term, e(Cr), the param- 
eters t(Cr), and the reduced form red(Cr, 5), by: 

• If Cr has the form (f>[s,t\ — > 4>[c^ x .,p{t),z\ then e(Cr) := c^ x .^, t(Cr) := t, and 
red{Cr, 5) := cj>[S(s), S(h), . . . , S(t n )} -> fe.^fa), . . . , 5(t„)), . . . , £(*„)] 

• IfCrhastheform4>[0,t\A^<f>[t',t\ -» 0[^ a ,.*( !B )A^(s a; )(i),tlA-.0[ 
f/zen e(Cr) := C3 x ^( x ) A ^^(s x ). *(Cr) := £ and 

red(CV, 5) :=<f>[0, 5(i)] A -u£[S(t'), £(*))] -» 

(5(i)), 5(f)] A -'</'[Sc 3x .^( a; ) A ^(Sx)(5(f)), 5(f)] 
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• If Cr has the form -is = — > s = S(c^ x .y=Sx(s)) then e(Cr) := c^ x , y= s x , 
t(Cr) := s, and 

red(Cr,S) := -.£(«) = -> = S(c 3x . a=S;c (^( S ))) 
We de/ine e(Cr, 5") := e(CV)(£(t(<7r))). 

Note that if 5 1= ->Cr where Cr has the form — > -0[c] then there is a fixed u such 
that for any correct S' 3 S deciding each for v < u, there is some v < u such 
that 5' NV[M]. 

3 Finite Injury Relationships 

We present the key idea behind the construction we will later introduce, the finite injury 
relationship between two trees. We are interested in a map A from a tree Ti to a tree T 2 
with the property that well-foundedness of T 2 will guarantee well-foundedness of Ti. 
A particularly simple way to do this would be a "zero injury" relationship: if x C y in 
T\ then A(x) C X(y) in T 2 . The finite injury relationship is more flexible; in addition to 
allowing A(x) to extend X(y), A(x) might "correct" some choice of branch in X(y), but 
in such a way that the choice made at each node may only be "corrected" finitely many 
times. This ensures that eventually, the choice at each node stabilizes, so an infinite 
branch in Ti would give rise to an infinite branch in T 2 . 

For our purposes, we use a simplified form, where branches are labeled with NU{?} 
and the only possible correction is from ? to a value in N. 

Definition 3.1. Let Ti , T 2 be trees such that the branches o/T 2 are labeled by N U {?}, 
and let X : T\ — > T 2 be given. We say X is a finite injury relationship if whenever 
x C y, either A(x) C X(y) or there is an a"~* (?) C A(x) such that a^(u) C X(y) for 
some MEN. 

Note that if we take the underlying set of T 2 to be partially ordered by u < 1 for all 
u ^ ?, this is the same as saying that A is order-preserving from the extension ordering 
on Ti to the Kleene-Brouwer ordering on T 2 . 

Definition 3.2. We say X : T\ — > T 2 is weakly finite injury if whenever x C y either 
A(x) C X(y) or there is an oT~' (?) C A(x) such that a^(u) C A(y) /or some iieN, 
and for every x there is a maximum n such that Xq C x\ C • • • C x„ implies that 
A(x ) 7^ A(x„). 

This weakens the finite injury condition to allow finite runs where A is constant. 

Lemma 3.1. 7/T 2 is well-founded and X : T\ —> T 2 is weakly finite injury then T\ is 
well-founded. 

Proof. Let x\ C x 2 C • • • be an infinite branch in Ti. Then we may inductively 
construct an infinite branch fi in [T] such that for each m, there is some i such that 
[i \ m C A(xj) whenever j > i. 
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Suppose we have constructed 7 = /j \ m, and let i be such that j > i implies 
7 C A(xj). Then, since 7 C \(xi) there is some rt > i such that 7'~"(u) C A(x n ) for 
some 11 e NU {?}. If u 7^ ? then it must be that 7" (u) C A(xj) whenever j > i. 

Otherwise, there are two possibilities. Either 7"(?) C A(iEj) for all j > n, in 
which case we are done, or there is some j > n such that 7"~"(it) C X(xj), and 
therefore 7^ (it) C A(xfe) whenever k > j. In either case, we have constructed /1 \ 
m + 1. □ 

In Section[6]we will show that when A is finite injury, an ordinal bound on the height 
of T2 can be converted to a bound on the height of T\. (A similar argument could be 
made for A weakly finite injury, but would be made significantly more complicated by 
the need to handle runs where A is constant.) 



4 Examples of Priority Trees 

First, we describe the general motivation behind our priority construction. We are 
attempting a computation that depends on various parameters whose "ideal" value is 
non-recursive (specifically, the true values of Skolem functions). Fortunately, we don't 
need to know the true value of these parameters, only values which suffice to satisfy 
certain conditions, the critical formulas appearing in the proof. 

Since the critical formulas contain parameters, which can themselves change in 
the course of our construction, a single critical formula may give rise to multiple con- 
ditions, as the values assigned to its parameters are changed. The first step of the 
construction will be the process of unwinding critical formula with parameters to a tree 
of formulas without parameters. 

It is convenient to arrange conditions in a tree, where the nodes represent conditions 
and the branches representing the possible values that can be assigned to that condition. 
In our case, the core conditions will turn out to be canonical Skolem terms, only some 
of which will be the key terms of a critical formula. The others will be parameters 
needed to compute the correct way to satisfy critical formulas. 

Having built such a tree, we will proceed in stages. At each stage we will proceed 
up from a node, choosing appropriate branches, until we reach a node associated with 
a critical formula. At this point, we will stop and consider how to satisfy that critical 
formula. We will then choose a branch, adding a Skolem term to our e-substitution. 
This may invalidate previous choices, so we may have to backtrack; we will ensure that 
when we do so, we always backtrack to a node where we had chosen ?, and instead 
choose an integer. This ensures that our process is finite injury. 

When dealing with higher rank critical formulas — that is, questions whose ideal 
solution is E^v for some potentially large N — we will have to use a tower of N trees. 
Roughly, the n + 1-st tree will behave like a finite injury argument relative to the n-th 
tree: that is, as long as the n-th tree is simply accounting for information from the 
n + 1-st, the n + 1-st will behave in a finite injury way. When the n + 1-st tree reaches 
a level n-condition, the n-th tree may force us to throw out some information from 
the n + 1-st tree and start that process over, causing the n + 1-st tree to exhibit more 
complicated behavior. So while it is difficult to describe the behavior of the n + 1-st 
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tree relative to the n — 1-st directly (it is roughly that of an infinite injury argument), 
and essentially impossible to describe its behavior relative to the first level, we can 
describe each level's behavior as being finite injury relative to the previous level. 

We first exhibit the simplified proof for the case where all Skolem terms have rank 
1, which substantially simplifies the process of computing a solving substitution from 
our construction. 

4.1 The Case of Rank 1 

Suppose we have a set Cr\, . . . , Cr^ of critical formulas such that rk(e(Cri)) = 1 for 
each i < k. We first produce a tree T 2 branching over N U {?} and assign to each node 
a of height i < k the formula form (a) := Cr,. 

We fix an w-ordering -< of T 2 so that when a C then a ~< 0. Next we construct 
another tree, 7\, also branching over N U {?}. We will assign to each node in T\ other 
than the leaves either a critical formula whose key term is canonical or a canonical 
Skolem term. Formally, for each non-leaf a £ T\, exactly one of e(a) and form(a) 
will be defined. 

Definition 4.1. Let a 6 T\ be given. Then S(a) is given inductively by: 

• S{{)):=9 

• If form{a) is defined then S(a^{u)) := S(a) U {(e(form(a)) , u)} 

• Ife(a) is defined then S(a^{u}) := S(a) U {(e(a),u)} 

We say a in T\ settles a node [3 G T 2 if red(form({3), S(a)) contains no e-terms 
other than the key term, and red(form(P), S(a)) belongs to the domain of S(a). 

Suppose we have assigned e(j) or form(j) to every 7 C a. Then let (3 be 
the ^-least node of T 2 such that a does not settle j3. If red{form{j3),S{a)) con- 
tains e-terms besides the key term, define e(a) to be a canonical e-term contained in 
red(form(P), S(a)). Otherwise, set form(a) := red(form(/3), S(a)). 

Given any node a e T\, we define a path through T 2 : 

Definition 4.2. • () C A(a) 

• If Q A(a) and S(a)(e(form({3))) is an integer n then (3^ (n) C X(a) 

Note that when (3 C a, A(/3) C A(a); moreover, the function cannot stabilize for 
infinitely long (that is, the A function is weakly finite injury, and furthermore, never 
requires the branching condition in weak finite injury). 

Define a subtree T[ consisting of those nodes e T\ such that for no 7 C is 
A(7) a leaf in T 2 . That is, a is a leaf in T[ if it is the first node such that A(a) is a leaf. 
Then T[ is a well-founded tree. 

Select a sequence of nodes through T[ as follows: 

• a = 

• If e(a„) is defined, set a n+ i := (S(a n )(e(a n ))) 
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• If form(a n ) is defined to be <p —> ip[c] and S(a n ) 1= 4> — > i>[0] then a^ +1 (S(a n ){e(form(a n )))) 

• If form(a n ) is defined to be <fi — ► tp[c] and 5(a„) 1= -i(<j> — ► ^[0]) then there 
is some n such that 5(a„) N ^>[[n]]. If there is some 7 C a n such that e(7) = 
e(form(a n )) then set /? := 7, otherwise set /3 := a n . Then set a„+i := /3^{n) 

This is a finite injury process from the integers to T[, and therefore terminates at 
some node a. Observe that 5(a) is correct and satisfies every critical formula along 
the path up to A (a), and is therefore a solving substitution. 

5 The Main Construction 

5.1 Trees 

Let CVi, . . . , Ctk be a fixed sequence of critical formulas. In the tree Tjv+i, assign 
to each node a the critical formula Crj where I is the height of a; denote this by 

form(a). 

To each node other than leaves in the trees T\, . . . , TV, we will assign either a 
canonical Skolem term of rank < N, which we will denote e(a), or a critical formula 
with canonical key term, which we will denote form(a). 

To every node a in a tree Tj, i < N, we assign an e-substitution S(a): 

Definition 5.1. • 5(()) := 

• Ifform(a) is defined then S(a^(u)) := 5(a) U {(e(/orm(a)),«)} 

• Ife(a) is defined then 5(a""(w)) := 5(a) U {(e(a),u)} 

Suppose T i+ i has been given. Then fix a constructive w-ordering ~< of T i+1 with 
the property that if a C /3 then a < [3. 

Definition 5.2. Wfe say a node a in Tj settles a node j3 in T i+ i if one of the following 
holds: 

• e{(3) is defined, rk(e((3)) < i, and there is some J^(u) C a wir/i e(7) = e(/3) 

• e(/3) is defined and rk(e(P)) > i 

• form(/3) is defined, rk{form{(3)) < i, and there is some 7""(w) C a with 
e(form(j)) — e{form{(3)) or e(j) = e(/orm(/3)) 

• form{(5) is defined, rk{form{j3)) > i, form(/3) has the form (f> — > V[ c ]» 
5(a) N <j> -> V[0] 

• form{(5) is defined, rk{form{j3)) > i, form{(3) has the form <j) — > -0[c], 5(a) 1= 
-i(0 — > V'tO]), and S(a) N ^[[n]]/or*ome n 
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Suppose we have assigned form(a) or e(a) for every a C (3 in Tj. Let (3 be 
the -(-least element of T i+ i such that a does not settle (3. If e(/3) is defined then 
rk{e{(3)) < i, and we set e (a) := e(/3). Otherwise form{(3) is defined; if form((3) < i 
and red(form(f3), S(a)) contains no e-terms besides the key term then set form (a) := 
red(form((3), 5(a)). Otherwise set e(a) to be a canonical e-term other than the key 
term appearing in red(form((3) , 5(a)). If form([3) > i and 5(a) does not decide <p — ► 
V>[0] then let e(a) be an element of unev{4> — *■ ^[0], 5(a)). If 5(a) N -.((/> — > -0[O]) 
but there is no n such that 5(a) 1= V[[ n ]] then let n be least such that 5(a) does not 
decide 4>[n] and let e(a) be an element of unev((j>{n], 5(a)). 

Note that if a does not settle (3, of" {u} may not settle (3 either. However it takes 
only finitely many extensions to settle (3, and therefore along any path through Tj, every 
(3 eT i+1 is settled. 

Also, note that the requirements about red(form(f3), 5(a)) are necessary only 
when forming TV: on lower trees form{(3) already contains no e-terms besides the 
key term. 

5.2 Building a Solving Substitution 

Now we describe the actual construction of a particular solving substitution, using the 
trees T 1 ,...,T N+1 . 

Definition 5.3. For a node a G Ti, we define a sequence of nodes a™ in Tj + i by 
recursion as follows. aP + is (). If a does not settle a™ or a™ is a leaf then the process 
terminates. Otherwise we split into cases. 

If e := e(a") is defined and rfc(e) < i then 5(a)(e) is defined and a" +1 := 
a™ "(5(a)(e)). Ifrk(e) > i and there is some u such that 5 '(a) 1= <^[[u,ij] where e(a) 
is c 3x.<p[x,y\ (t) then a" +1 := a™"(u), and if there is no such u, a™ +1 := a" ""(?). 

If f := form(a r i_) is defined and rk(f) < i f/?en 5(a)(e(/)) is defined and 
a™ +1 := aip(5(a)(e(/))}. Otherwise rk(f) > i, and either 5 '(a) h — > ^[c], 
in wnicn ca.se a™ +1 := a™ ""(?), or f/zere is a u such that 5(a) N ^ n f^is 

case, if there is some 7 C a™ smc/z f/?af e(7) = e( form(a^_) , 5(a)) f/zerc se/ /3 := 7, 
otherwise set (3 := a". Sef a™ +1 := (3^(u). 

Define 5m '■ TV — > Tjv+i to be the final al? in this process; note that this exists 
since there are no infinite paths through Tjv+i and the process is weakly finite injury, 
and therefore terminates. Define T' N to be those nodes a € Tjv such that for no (3 C a 
is Sn(P) a leaf — that is, leaves in Tj^ are initial nodes a such that 5jv(a) is a leaf. This 
tree is well-founded since Tjv+i is and Sn restricted to T' N is weakly finite injury. 

We may iterate this process, defining subtress T[ C T, and weakly finite injury 
maps Si : T[ — > T/ +1 . 

Now choose a path through T{ as follows: 

• Define ao to be () 

• If e(a n ) is defined, set a n +i := oQ (5(a„)(e(a„))) 

• lfform(a n ) is defined to be <^> — > ip[c] and 5(a„) 1= <f> — > ^[0] then aQ_ 1 (5(a„)(e(/orm(a„)))) 



11 



• If form(a n ) is defined to be <fr — ► V-4 C ] an d S(a n ) \= -i(</> — ► ?/>[0]) then there 
is some n such that S(a„) N If there is some 7 C a„ such that e(7) = 

e(form(a n )) then set /3 := 7, otherwise set (i := a n . Then set a n +i ■— /3^(n) 

This process is a finite injury function from the natural numbers to T[, and therefore 
terminates after finitely many steps at some node a. 

Lemma 5.1. S(a n ) is correct for each n. 

Proof. By induction on n. S(a ) is empty, and therefore correct. If (ex.(f>[x],u) £ 
S(a n +i) with u ? then either (ex.<f>[x], u) £ S(a n ) or S(a n ) \= <j>[[u]]; in either 
case, since {S(a n )) <rk (ex.<i>[x]) C S(a n+1 ) and S(a n ) is correct, S(a n+1 ) \= (j)[[u}}. 

□ 

Lemma 5.2. If 5(7) is correct then £(7") is correct for all n. In particular, ^(7) is 
correcf. 

Proof. By induction on n. Essentially the same as the previous lemma. □ 

Then in particular, let 7 := 5n-i(- ■ • Si(a) ■ ■ ■). S(j) is correct, and therefore a 
solving substitution. 



6 Ordinal Analysis 

Lemma 6.1. Suppose f : Ti — ► T2 is a finite injury relation, and T2 has height a. 
Then there is a height function o :T\ — ► such that x £ y implies o(y) < o(x). 

Proof. Let h : T 2 — > a be such that s £ t implies /i(t) < /i(s). Then we define 
o : Ti — > cj q as follows: 



o(x)=i J2 w h(o) +w h(l)+1 

\o-<?)C/(x) / 

We must show that this is order-preserving. Let y £ x, and suppose f(y) C /(x). 
Then we have /(?/) ^ (u) C /(x); if u = ? then 

o(x)=( ^ h{a) )+^ h(fiv)) +( E w M-)| +£i; M/(x))+i 

\a~(?>C/(y) / \/(»)-(?)C«-{?)C/(x) / 

So it suffices to show that 

+ I £ u h(a) I + w fc(/(x))+l < u h(y)+l 

\/(j/)-(?>g«-(?>C/(x) / 

But this is clear, since /i(/(x)) + 1 < h(f(y)) < h(f(yj) + 1 and h(a) < h(f(yj) 
whenever /(y) (?) C a. 
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If u =/= ? then this is even simpler, since the cj h U(v)) term is omitted. 
Now suppose that b (?) C f(y) and a ^ (u) C /(.t). Then 

o(y) = /? + w h (/(v)) + 7 

for suitable 7 < wM/OO) < ft, and 

o(a;) =/? + <* 

where 8 < w h VW>. Therefore o(x) < o(y). □ 
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